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Modern IT Environments are Hybrid 


Multi-Cloud O 
On Premise 
Work Stations 


Mobile Force O ae 
OT/lloT/loT e 
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Common Challenges 


Lack of cohesive visibility across hybrid 
environments. 


Many disparate, point solution tools, providing 
partial information. 


Lots of inefficient manual work. 
Data becomes out-of-date quickly. 
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The Nature of IT Asset Data 


High Volume High Variance 
| cC | — | do Acquisitions Skype 2 Microsoft 
=»3 XO 
EI OSO Product Communicator > Lync > 
— rebranding Skpe for Business 2 Teams 
“A” means "B"  lync.exe = Skype for Business 


i i Name variance MSFT, Microsoft Corporation, 
ASIA Microsoft, microsoft corp, ... 


8 >1 20 >1 


Manufacturer Product 
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Why Global IT Asset Inventory? 


Negotiation 


Planning 


Risk Assesment 


Cost Reduction 


Consolidation contracts / 
suppliers 


Budgeting 


Chargeback / Show back 


Financial Reporting 


Planning 


Asset status verification 


Configuration 


Usage 


Connectivity 


Change history 


Rouge assets 


Source: The ITAM Review 


Procurement 


Financial 


Security 


Harnessin 
ITAM Data 


Enterprise Architecture 
Decision Making 


Strategy and Projects Visibility of assets and usage 


Transformation Projects 


Software Compliance 


Compliance 4 
Regulatory 


; : Hardware / Data Compliance 
Obligations 


Regulatory Compliance 
Internal Audit Compliance 
Contractual Compliance 
Configuration Management 


Asset usage 


Service Desk 
Asset changes 


Request automation 


Cheaper Alternatives 


Efficiency Removal of waste 


Re-architecture opportunities 


Re-negotiation opportunities 


Planning 


Consolidation / Preparation 


Monitoring 


Optimization 


> NETTEN 


(Y 


U Security 
best-practices 
$ Software Asset 
Management 


Compliance 


Enterprise 
Architecture 


Use Cases 


You can't manage nor protect what you don't know 


Internal and external audits 
(what | who | how) 


Identify and track unauthorized software. 
Ensure software is up-to-date. 


Owned vs. Deployed vs. Used 


End-of-life application or component 
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Qualys Asset Inventory 


® Qualys. Enterprise 


TOP SERVER OPERATING SYSTEM OPERATING SYS Last Refreshed A Few Second: 


Source of truth for IT and Security 


Total 


teams managing assets in hybrid — — EN 
LI Red Hat Red Hat Enterprise... 3 E 10 Linux 
environments. T 


Complete, continuous, structured and rs 
enriched asset inventory, that 
enables better business decisions. 


Security Databases Application ^ Conte 
Development ^ Manage! 


Oualys Asset Inventory 


Discovers all assets in global, hybrid infrastructure. 


Asset information is normalized and categorized 
for hardware and software. 


Enriched with metadata and indexed 
for 2-second visibility. 


Two-way CMDB synchronization 
(clean and categorized asset data) 


Legacy data 
centers 


Corporate 
infrastructure 


Qualys Sensors 
Scalable, Self-updating & Centrally Managed 


Private cloud 
infrastructure 


Virtualized 
Infrastructure 


Commercial laaS & 
PaaS clouds 


Pre-certified in 
market place 


Fully automated 
with API 
orchestration 


Light weight, multi- 
platform 


On premise, elastic 
cloud g endpoints 


Real-time data 
collection 


Passively sniffs 
network 


Real-time device 
discovery & 
profiling 


Identifies protocols 
& application 
traffic 


Agentless + Agent Based + Passive 


Public Cloud 
Connector 


CMD 


Log 


Active Directory* 


Raw Data 


Manufacturer 


Operating Systems 


SunOS 5.9 


Sun Microsystems 


Hardware 


sun4u SPARC SUNW 


Sun Microsystems 


Software 


Hyperion CapPlan 6_2-p 


Hyperion Solutions 


Owner 


Oracle 


Oracle 


Oracle 


Product 


Solaris 


Sun Blade 100 


Hyperion Capital Planning 


Market Version 


9 


6 


Edition 


Category 


Lifecycle Stage 


Unix > Server 


EOL 


Computer > Server 


EOS 


Professional 


Application > Finance 


EOL 


End-of-Life 


October 2011 


August 2011 


May 2014 


License Type 


Open Source 


Commercial 


Visualize with 
customizable 


dashboards 


Rationalize IT assets, 
prioritize work and gain 
actionable insights. 
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Asset Inventory DASHBOARD INVENTORY 
Global IT Visibility v 
> Last 30 Days 
OPERATING SYSTEM DISTRIBUTION CATEGORY BREAKDOWN 
Total M Computers Virtualized [NI Networking IN St 
1 44K view 
a E Windows 1036 
Mac 227 


© Linux 130 
B Unidentifi... 26 
© Virtualizat...21 


Notebooks 


TOP CLIENT OPERATING SYSTEM 


Microsoft Windows 10 
Apple macOS 
Microsoft Windows 7 
Apple OS X 


Microsoft Unidentified 


ES 183 
E] 121 
I 38 
| 13 


== —— 
Desktops Servers Virtual Mach 


TOP CLIENT APPLICATI! 


EE Commercial License 


1 
(6134) E 
a 


Productivity Ne 
A 


Complete and 
clean data to 
your CMDB 


Certified ServiceNow App 
Syncs asset data in both 
directions. 


ctrl + oot * n 
«> 
List and Form 
View 


ctrl + opt + v 


P 


T 
Doo EDS 


citri + ont * t 


M 


All Bookmarks 


A 


Home 


servicenuw” Service Automation 


Y O 


Self-Service 


Qualys App for ServiceNow CMDB 
Y Configuration 


W API Sources 
Hr Schedules 
À Properties 
> Sync 


> Advanced 
Y Reports 
Y Support 
Service Desk 
Incident 
Problem 
Change 
Configuration 
Service Catalog 
Item Designer 
Knowledge 
Organization 


Product Catalog 


< | = Schedules 


Name SN to Q Assets 
Active | 
+ API Source | testing cred C 


k Sync | Servicenow to Qualys 
Direction 


Conditional 


Servicenow to Qualys Sync 


Qualys Asset Tag  ServiceNow C 
Table Computer [cmdb ci computei 


Query Add Filter Condition 
Add "OR" Clause 


All of these conditions must be met 


IP Address 


Fully qualified domain name 


ssive Network Sensor 


in Beta 


Discovery € 
Profiling 


Eliminate blind spots. Identify and 
profile devices as soon as they 
connect to the network. 


Continuously enrich existing — . 
inventory with additional details in 
real time. 


Free ec eo eb or en ve 
systems that may not be suited for 
active probing or agent. 


© 


Passive Network Sensor 


BETA 


How? 


Deploy a Passive Sensor 
(physical or virtual) 


Mirror traffic 


Continuously discover 
and profile every device 
with network activity 
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DEMO 


Qualys sensors for complete, detailed asset telemetry 
Structuring your Hardware and Software (normalization and taxonomy) 
Enriching your inventory (e.g. lifecycle) 

Blind spots? (showcase passive discovery) 


Roadmap 


Asset Inventory 


Q1 2019* 


August 2018 November 2018 CMDB Sync 2.0 


Beta GA 


+ Vuln Dashboard 
Normalized data 


T T 


During Beta + Sources 

Improve coverage (>90%) User / Org. 
Additional Vendor Lifecycle Passive Discovery. 
(future EOL/EOS) Enterprise Mobile 


Q2 2019* Q3 2019* 
Software Usage. Internal Lifecycle 
Management 


T 


Asset Relationships 
Highlights communication 
between assets. 
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Thank You 


Pablo Quiroga 
pquiroga(aqualys.com 


